Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: 8Jv0JqS8pCQx1U4UTe4WYM9zf8kHywYx5of9o3jEC/U=
Subject key identifier: 66:EF:ED:A0:A4:03:52:2F:C4:6E:70:F4:35:88:C0:2A:24:FC:17:A3
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 019E1EDA414D27E42D4CF9A4453008BD708E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 09E2
Signing time: Wed 13 May 2026 01:01:20 +0000
Manifest this update: Wed 13 May 2026 01:01:20 +0000
Manifest next update: Thu 14 May 2026 01:01:20 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: 9IzUfPJqG/LE89M34SkzpZo/YCeLx/fX03o420STays=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:41:4d:27:e4:2d:4c:f9:a4:45:30:08:bd:70:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: May 13 01:01:20 2026 GMT
Not After : May 14 01:01:20 2026 GMT
Subject: CN=66efeda0a403522fc46e70f43588c02a24fc17a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:98:36:7c:91:e5:11:08:d8:66:8c:3a:c4:
04:ef:a5:20:c0:a3:34:0c:7e:83:00:69:c4:ac:f1:
cd:7e:c2:0e:30:12:74:b6:62:68:39:0c:16:c8:24:
18:34:34:82:85:8a:a6:a5:27:7b:2f:ad:4a:be:db:
0b:a5:cb:27:2e:7c:ec:e8:64:c7:62:c4:34:f1:19:
03:3b:89:89:24:79:2b:07:24:a5:b4:2e:cf:f0:18:
8f:a0:a9:25:3d:09:bf:98:90:06:47:30:a5:48:c0:
58:e4:a8:b6:87:69:ea:58:50:f0:4e:ac:73:55:f2:
d7:68:4e:ca:74:be:02:2c:a5:a5:08:fc:33:03:05:
ec:3b:ee:dd:98:01:e0:c7:d4:08:41:e5:3e:ae:a2:
21:c1:38:da:7f:04:56:b2:11:76:b7:80:9f:02:1e:
56:72:13:45:f0:48:80:0e:13:e4:97:51:e6:41:02:
43:3f:d7:da:76:65:07:1e:ff:96:49:4c:14:76:8a:
55:76:63:1b:07:0a:1c:f0:64:b5:b4:fa:2f:d6:1b:
99:50:a8:45:de:28:86:45:fb:51:8d:26:9d:10:a9:
90:52:1f:b8:85:08:7a:24:80:69:82:67:02:fb:e1:
d5:d0:2d:e6:b7:e6:a5:64:e0:5f:ba:0f:04:2e:1c:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:ED:A0:A4:03:52:2F:C4:6E:70:F4:35:88:C0:2A:24:FC:17:A3
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:38:9b:2f:d3:3c:51:93:01:81:50:58:e4:09:c0:19:d0:
07:d7:ce:fa:01:4d:21:dc:6c:47:5c:db:d3:0d:86:16:df:ae:
bf:68:4d:c1:0c:14:9f:e8:cd:25:82:e7:1a:af:0c:23:5e:b1:
61:c8:cc:2f:39:64:7c:0a:42:bb:ae:32:60:9e:8d:68:74:63:
3a:33:ed:e0:68:65:b7:a8:89:92:20:b2:b5:78:16:80:2a:62:
ad:e5:a7:67:52:3c:92:f9:f5:52:26:ac:ee:ce:da:17:93:c2:
af:a0:c0:94:73:70:34:02:99:fe:c8:0c:7b:60:8e:a9:48:63:
3a:8e:7d:a6:06:8e:3d:d2:b2:fc:6f:ee:d8:f3:71:f7:06:99:
07:0c:06:d9:1b:68:f5:1f:4c:6c:bc:37:cd:29:0d:70:ab:9f:
ef:96:fd:0a:8b:d6:17:41:0b:a4:39:0a:5b:65:71:11:9e:30:
58:20:64:7e:76:cd:33:74:73:94:4c:3a:51:19:8b:8d:e4:06:
63:b2:d2:d4:1f:3d:4c:99:a5:20:33:c5:e6:61:ca:d8:7e:cc:
08:8e:8b:ed:5e:56:00:f3:13:de:97:62:e7:27:fa:b9:dc:95:
26:4f:57:8a:c1:0b:dd:d3:96:79:af:f4:7c:60:7e:22:7a:ce:
31:02:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:55 2026 by rpki-client